dsh-secret-scrub
Secret-scrubbing guard plugin: irreversible regex redaction of secrets before session-log persistence and model requests
211 results
Secret-scrubbing guard plugin: irreversible regex redaction of secrets before session-log persistence and model requests
依赖安全审计:扫描项目依赖的已知漏洞(OSV.dev)并检测过期依赖(npm registry),返回漏洞严重级/修复版本与升级幅度
敏感信息扫描:递归扫描代码库中的泄露密钥/令牌/私钥/硬编码密码,输出去敏感化的位置与严重级,提交前自查安全
安全加固:威胁建模(STRIDE)+ 三层边界系统,任何接收用户输入/鉴权/存储敏感数据/集成外部服务的功能都按安全第一开发。受 addyosmani/agent-skills(88k★ MIT)启发。
密码哈希(PBKDF2/scrypt)
Offline-first static admission scanner for DeepSeek Harness plugins.
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
Agent observability plugin for DSH — behavior audit, cost tracking, anomaly detection
Say the secret handshake: DSH subagents start on the Minimal two-tool condition to unlock DeepSeek's full RL-trained strength, then get the whole toolbox.
V0 capability-disclosure scanner for DeepSeek Harness (DSH) cordis plugins: reports which sensitive services (credentials/shell/approval/sandbox/fs/tools...) a plugin declares or references before you trust it.
Governed platform access for DeepSeek Harness — no credential on the machine
Look up what a DeepSeek Harness plugin can actually do, from inside dsh.
DeepSeek Harness 密钥保险库插件:密钥自动脱敏、自动收纳、密码本设置页、跨重启持久(官方 profile bundle)
Approval guard for DeepSeek Harness: write/edit/editor/bash calls touching sensitive paths (.env, .git, SSH keys, .pem) and reads of SSH keys or certificates become an approval ask.
DSH plugin: anonymize workspace-external file paths before model requests with user confirmation
Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.
Structured code review skill for DeepSeek Harness -- bugs, security, performance, style
DeepSeek Harness plugin: predict (pre-install) and detect (post-install) duplicate @deepseek-ai/dsh-* copies, version drift, and vendored core services to prevent Symbol-key crashes like "Cannot read properties of undefined (reading 'prepare')".
dsh web 认证插件:登录保护、空闲自动登出、认证有效期、设置界面、`dsh web p` 重置密码
Login wall and public gateway for DeepSeek Harness cloud deploys.
Agent harness 配置系统:agents/skills/hooks/rules 四层分工、instincts 持续学习(自动学模式、聚簇成技能)、AgentShield 安全审计(secrets/权限/hook 注入/MCP 风险)、Unified Memory Vault 跨 harness 共享、GateGuard 破坏性命令门卫。受 affaan-m/ECC(185k★ MIT)启发。
Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.
One install for SpecFlow, GitFlow, Guardian, and Code Intel on DeepSeek Harness.
Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.